It's been awhile since I've seen an update from devs, but I recall that it would require in house development since the current implementation is through play services + store (and not ASOP). While many degooglers don't like it, it expedited their ability to roll out security keys quickly and broadly.